Project

General

Profile

Actions

Task #977

open

Account management in GUI

Added by Marcel Poul almost 7 years ago. Updated almost 7 years ago.

Status:
New
Priority:
Normal
Assignee:
Vít Švanda
Category:
Account managment
Target version:
-
Start date:
02/20/2018
Due date:
% Done:

0%

Estimated time:
Owner:

Description

I pretty much struggle with account management, especially objects representation in GUI.

As I talk to customers and other IdM consultants, everyone struggle with it too. Better said, customers do not understand it and don't know how to use it even after several lessons (hours) and following tutorials (e.g. manually link an Identity and AD account).

The representation by Identity, Accounts and Entities is not easy to understand and pretty much confusing. I would like to either
  • shrunk the representation into one object or
  • (maybe easier way) abstract from the account and entity representation in GUI in e.g. following way:

One GUI agenda with easy to understand form of account list

IdM object | IdM Account id (sync/prov) | Account id (system) | Operations
Karel Novak(knovak) | knovak | | link,unlink/delete

common task done on agenda
  • Manual link identity with AD account by selecting an identity and online selecting of account. Or select an identity and type AD account id (). During the manual link of identity to account, one must be able to add a role. Ids are filled from provisioning setting if exists.
  • Remove link - keep Connected system Account or send DELETE on the account (choose one)
  • show the Account details - all atributes on connected system and their values

Usual point of view of administrator is just easy as: Identity is in IdM and Account is in Active Directory, I do not care, how IdM store the link between IdM and AD account.

At the moment, I cannot see a situation, when we would like to work with separate account and entity objects.


Related issues

Related to IdStory Identity Manager - Task #976: Remove comparison by account and entity ids during synchronizationClosedVít Švanda02/20/2018

Actions
Actions #1

Updated by Marcel Poul almost 7 years ago

  • Related to Task #976: Remove comparison by account and entity ids during synchronization added
Actions #2

Updated by Marcel Poul almost 7 years ago

  • Priority changed from Normal to High

A few days after initial post, I came across other situations when the current representation in GUI is not clear for me.
There are other objects that makes it even harder to understand the principal and work with it - identityAccount, together with confusing error messages e.g. https://redmine.czechidm.com/issues/982 it really is not easy to work with accounts in GUI. Without many consultation with product developers (thx. Ondra and Vitek) I would not be able to connect DB system and MS AD.

Actions #3

Updated by Vít Švanda almost 7 years ago

  • Priority changed from High to Normal
Actions

Also available in: Atom PDF